Security Consultant Infrastructre

Introduction

seeking a highly skilled and certified Network Security Engineer with extensive hands-on experience in Forescout NAC and Pulse Secure (Ivanti) VPN. The ideal candidate will be responsible for designing, implementing, and maintaining secure network access and VPN solutions across enterprise environments.

Your Role And Responsibilities

Forescout NAC

Ø Deploy, configure, and manage Fore-scout NAC for network access control across LAN/WAN environments.

Ø Develop and enforce access control policies for endpoints and users.

Ø Integrate NAC with directory services (AD, LDAP) and SIEM platforms.

Ø Perform advanced troubleshooting of NAC-related issues including device profiling, policy enforcement failures, and network access anomalies.

Ø Handle incident response for unauthorized access attempts, rogue devices, and policy violations.

Ø Conduct root cause analysis and implement corrective actions for recurring NAC issues.

Ø Perform regular health checks, upgrades, and patching of NAC

Ø Develop and enforce network access policies and compliance standards.

Ø Collaborate with OEM on regular basis to implement security best practices.

Pulse Secure / Ivanti VPN

Ø Configure and manage VPN gateways, user authentication, and secure tunnels.

Ø Administer and troubleshoot Pulse Secure / Ivanti VPN infrastructure for secure remote access

Ø Monitor VPN performance and availability across distributed environments.

Ø Troubleshoot VPN connectivity issues including client-side errors, certificate problems, and authentication failures.

Ø Respond to VPN-related incidents, including unauthorized access, session hijacking, and bandwidth abuse.

Ø Collaborate with SOC teams to investigate suspicious VPN activity and generate incident reports.

Ø Perform regular health checks, upgrades, and patching of VPN systems

Ø Develop and enforce network access policies and compliance standards.

Ø Monitor and respond to security incidents related to network access and VPN usage.

Ø Document configurations, procedures, and incident reports

Ø Collaborate with OEM on regular basis to implement security best practices.

Troubleshooting & Incident Handling

Ø Lead end-to-end troubleshooting for NAC and VPN issues, ensuring minimal downtime and user impact.

Ø Use packet captures, logs, and diagnostic tools to identify and resolve complex problems.

Ø Maintain detailed documentation of incidents, resolutions, and preventive measures.

Ø Participate in on-call rotations and provide escalation support for critical security incidents.

Ø Conduct post-incident reviews and contribute to continuous improvement of security operations.

Preferred Education

Bachelor's Degree

Required Technical And Professional Expertise

Minimum 5 years of hands-on experience with Fore-scout NAC and Pulse Secure / Ivanti VPN.

Ø Mandatory certifications: Fore-scout Certified Administrator (FSCA) or equivalent & Ivanti Connect Secure Certification or Pulse Secure Certified Technical Expert (PCTE).

Ø Strong understanding of network protocols, authentication mechanisms, and access control models.

Ø Experience with Active Directory, RADIUS, LDAP, and certificate-based authentication.

Ø Excellent troubleshooting and analytical skills.

Ø Strong communication and documentation abilities.

Preferred Technical And Professional Experience

Minimum 5 years of hands-on experience with Fore-scout NAC and Pulse Secure / Ivanti VPN.

Ø Mandatory certifications: Fore-scout Certified Administrator (FSCA) or equivalent & Ivanti Connect Secure Certification or Pulse Secure Certified Technical Expert (PCTE).

Ø Strong understanding of network protocols, authentication mechanisms, and access control models.

Ø Experience with Active Directory, RADIUS, LDAP, and certificate-based authentication.

Ø Excellent troubleshooting and analytical skills.

Ø Strong communication and documentation abilities.